Marcel Winatschek

Facebook Was Reading Your Messages

You could’ve been congratulating your aunt, gossiping about someone in the group chat, sending photos you wouldn’t want your family seeing—didn’t matter. Facebook was reading all your WhatsApp chats the whole time, encrypted or not. Cryptography researcher Tobias Boelter at Berkeley found the backdoor. Facebook had built one in and never told anyone. All those years claiming messages were end-to-end encrypted, only visible to you and the person you were talking to—complete lie.

Here’s how it worked: WhatsApp used real encryption from Open Whisper Systems. The Signal protocol. Strong stuff—you and the other person exchange keys, messages lock down, supposed to be unbreakable. But Facebook had built in their own trapdoor. They could generate new encryption keys without telling you, slip in whenever, read whatever. Not a flaw in the protocol itself. Intentional.

So they were vacuuming up everything. Your drunk texts. Your group chat gossip. The intimate photos. All of it fed into their databases, tagged with your name, sold in pieces—your interests, your relationships, your secrets. And when the government asked for your data, they handed it over. The same way they always do, right after swearing they never could.

The real mindfuck was that you’d trusted them. That’s what made it work. You thought you were using something private. Turns out you were just feeding the machine, giving them information they’d already convinced you they couldn’t access.

Some people switched to Signal or Threema after that. Most didn’t. Too annoying. Too much effort. It doesn’t matter anyway. The backdoor’s still there, probably always will be. You know it won’t fix anything, but you open WhatsApp again anyway and type out your message, same as before.